UpHeron
All vulnerabilities

Servers and applications

CVE-2022-23632

Wrong TLS configuration choice

Severity
High 7.5
Published
16 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.6.1
Also known as
GHSA-hrhx-6h34-j5hc
Sources
NVD, Project advisories (GitHub)

Description

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer security (TLS) configuration when the host header is a fully qualified domain name (FQDN). For a request, the TLS configuration choice can be different than the router choice, which implies the use of a wrong TLS configuration. When sending a request using FQDN handled by a router…

Affected software

SoftwareAffected versions
TraefikServers and applications · cpe:a:traefik:traefik
  • Every version before 2.6.1
TraefikServers and applications · github:traefik/traefik
  • Every version before 2.6.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-23632
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-23632
  • GitHub Advisory Database https://github.com/advisories/GHSA-hrhx-6h34-j5hc
  • github.com https://github.com/traefik/traefik/security/advisories/GHSA-hrhx-6h34-j5hc